The end result is open source so bots are combing through it anyway. I’d personally want to sandbox the agent with only access to the code being worked on and none of my personal data, but open source code isn’t my personal data.